A responsive, one-page business theme for WordPress — repackaged by Surefire Studios with security fixes for the abandoned upstream release.
The original OneTone and OneTone Pro themes by MageeWP are no longer maintained, and the free theme is no longer listed in the WordPress.org theme directory. Plenty of live sites still run them.
This repository hosts drop-in replacement builds that patch known cross-site-scripting (XSS) issues and tighten input handling, so existing OneTone sites can stay online without a full redesign.
Important
If your site runs OneTone or OneTone Pro from any other source, update to the builds here. Always take a full backup before replacing a theme on a production site.
Note
These are unofficial community patches. Surefire Studios is not affiliated with MageeWP, and the builds are provided as-is under the GPL (see License).
| File | Theme folder | Version | Best for |
|---|---|---|---|
onetone-patched.zip |
onetone |
4.0.1 | Sites on the free OneTone theme. Customizer-driven, WooCommerce-ready. |
onetone-pro-patched.zip |
onetone-pro |
3.0.1 | Sites already running OneTone Pro. Adds a dedicated admin options panel and a portfolio. |
Both archives are complete, ready-to-install WordPress themes — unzip straight into wp-content/themes/, or upload the .zip through the WordPress admin.
Warning
onetone-pro-patched.zip originates from a live client build and still registers two site-specific post types (Team Member and Practice Area). Harmless if unused, but review before deploying to an unrelated site. Stray working files from that build were removed in 3.0.1.
| OneTone 4.0.1 | OneTone Pro 3.0.1 |
 |
 |
Build the whole front page from the Customizer by picking a template for each section:
| # | Section | # | Section |
|---|---|---|---|
| 1 | Banner | 9 | Contact |
| 2 | Slogan | 10 | Portfolio |
| 3 | Service | 11 | Pricing |
| 4 | Gallery | 12 | Blog |
| 5 | Team | 13 | Custom |
| 6 | About | 14 | Custom |
| 7 | Counter | 15 | Custom |
| 8 | Testimonial |
Plus a full-width slider section and YouTube / Vimeo / HTML5 video backgrounds.
- 🎨 Live Customizer options — colors, typography, spacing and per-section styling powered by Kirki
- 📱 Fully responsive one-page layout on the Bootstrap 3 grid, with smooth-scroll anchor navigation
- 🌊 Parallax and video backgrounds, animated counters, scroll-triggered animations
- 🛒 WooCommerce ready — bundled shop templates, product gallery zoom, lightbox and slider support
- 🧩 Widget areas for pages, posts, archives, search results and 404 — each with a left and right variant
- 🌍 Translation-ready (
.potincluded, withes_ES,fr_FRandru_RUbundled) and a full RTL stylesheet - ⭐ Font Awesome 4.7 icon picker throughout the section options
- 🖼 Custom background, custom header, custom logo and favicon, post formats and featured images
- ⚙️ Custom CSS field, editor styles, Jetpack support and WPML config
- A standalone theme options panel in the admin (Options Framework) alongside the Customizer
- Portfolio post type with single, category-taxonomy and grid templates
- Extra WooCommerce sidebars for shop archives and product pages
- WPBakery / Visual Composer element templates
| Layer | Used |
|---|---|
| Platform | WordPress (classic PHP theme, no build step) |
| Language | PHP, HTML5, CSS3, JavaScript (jQuery) |
| CSS framework | Bootstrap 3.3.7 (3.3.4 in Pro) |
| Options | Kirki Customizer framework (free) · Options Framework (Pro) |
| Icons | Font Awesome 4.7.0 |
| JS libraries | Owl Carousel, Magnific Popup, Waypoints, CounterUp, Parallax.js, YTPlayer, ScrollTo, jQuery Nav |
| Commerce | WooCommerce template overrides |
| Plugin bootstrap | TGM Plugin Activation (prompts for OneTone Companion) |
- WordPress 4.0 or newer (tested up to 5.8)
- PHP 7.4 – 8.3 (both archives are syntax-checked against 7.4 and 8.3 on every push)
- Optional: WooCommerce for shop pages
- Download
onetone-patched.zip(oronetone-pro-patched.zip) from this repository. - In WordPress, go to Appearance → Themes → Add New → Upload Theme.
- Choose the
.zip, click Install Now, then Activate.
Replacing an existing OneTone install? Back up the site first, then upload the zip and confirm the Replace current with uploaded prompt. Theme options live in the database, so your settings are preserved.
cd wp-content/themes && unzip ~/Downloads/onetone-patched.zipThat creates wp-content/themes/onetone. Activate it under Appearance → Themes.
wp theme install https://github.com/SurefireStudios/onetone-wordpress-theme/raw/main/onetone-patched.zip --activateAdd --force to overwrite an older OneTone install in place.
- Create a front page. Add a page, assign the Home page template (
template-home.php), then set it under Settings → Reading → Your homepage displays → A static page. - Build the sections. Open Appearance → Customize. Each homepage section has its own panel where you choose a section template (Banner, Service, Team, …), add content, and set its background, padding, colors and typography.
- Wire up the menu. Give a section a Menu Title and OneTone adds it to the one-page anchor navigation with smooth scrolling.
- Style globally. Site-wide colors, fonts, header behaviour (sticky / overlay), footer and social icons live in the Customizer's global panels. Free-form tweaks go in the Custom CSS field.
- OneTone Pro. The same options are also available from the dedicated OneTone options panel in the admin sidebar, plus portfolio and WooCommerce settings.
Tip
The free theme prompts you to install OneTone Companion, the upstream plugin that supplied the contact form and one-click demo templates. It is optional — the theme works without it, but the contact-form section needs it.
PHP 8 compatibility
- Fixed a fatal parse error in
onetone-pro/functions.php, where the file ended inside an unterminated/**comment block. On PHP 8 this stopped OneTone Pro from loading at all. - Fixed an unparenthesized nested ternary in
woocommerce/config.phpin both themes — fatal on PHP 8.0+ whenever WooCommerce loaded that file.
Housekeeping
- Removed files left behind by a site build in the Pro archive:
error_log(two copies),functions.php0,style.css.1,merged-style.cssandoptimisationio-merged-script.js. These were unreferenced by the theme and leaked the originating server path — about 1.9 MB in total. - Added a CI workflow that syntax-checks every PHP file in both archives on PHP 7.4 and 8.3.
Security
- Added critical security patches to address XSS vulnerabilities
- Enhanced overall theme security
- Improved input validation and sanitization
For releases before the Surefire Studios fork, see readme.txt (OneTone) and ChangeLog.txt (OneTone Pro) inside each archive, or the original theme documentation.
Original upstream theme header (OneTone Pro)
Theme Name: Onetone Pro
Theme URI: http://www.mageewp.com/onetone-theme.html
Description: Onetone Pro is a one-page business theme based on Bootstrap framework and
coded with HTML5/CSS3. All required information are displayed on a single page with clear
order according to users' preferences. The basic sections designed for business purpose
have already been built for you, such as services, about, gallery, clients, etc. There's
also an extensive admin panel where unlimited sections can be easily added. Multiple
options are available if you prefer to do some adjustments, such as changing background,
parallax scrolling background, video background, Font Awesome Icons, uploading logo and
favicon, adding custom CSS and so on. The theme is also responsive, clean, and SEO
optimized. This version has been security patched by SureFire Studios to address critical
vulnerabilities.
Tested up to: 5.8. Neither theme has been verified against a current WordPress release. Testing reports are welcome.- Dated dependencies. Bootstrap 3 and Font Awesome 4 are both end-of-life upstream. They still work, but no longer receive fixes.
- The Pro archive carries two post types from the client site it was built for — see the note under What's in this repository.
CI verifies that every PHP file parses on 7.4 and 8.3; it does not exercise the themes at runtime. Please test on a staging site before deploying.
Issues and pull requests are welcome — especially further security hardening, PHP 8 compatibility fixes and WordPress version testing reports.
Because the themes ship as archives, a code change means extract → edit → lint → repackage. CONTRIBUTING.md walks through it, including how to rebuild a .zip that WordPress will accept.
Every push and pull request is syntax-checked by the PHP Lint workflow across PHP 7.4 and 8.3.
Caution
Found a security vulnerability? Don't open a public issue — follow SECURITY.md to report it privately.
Released under the GNU General Public License v3.0 — see LICENSE.
OneTone and OneTone Pro were originally created by MageeWP and released under the GNU GPL. These builds are derivative works distributed under the same terms. Security patches by Surefire Studios.
Bundled third-party libraries keep their own licenses (Bootstrap — MIT, Font Awesome — SIL OFL 1.1 / MIT, Kirki — MIT, and others noted inside each archive).
- 🌐 Surefire Studios — https://www.surefirestudios.io
- 📘 Original theme (MageeWP) — https://mageewp.com/onetone-theme.html
- 🐛 Report an issue — https://github.com/SurefireStudios/onetone-wordpress-theme/issues